NGINX_CONF

map $http_origin $cors_header {
     default     ""; #empty causes the Access-Control-Allow-Origin header to be empty
     ~*.site.by      "$http_origin";
     ~*.dev.site.by  "$http_origin";
     ~*.lab.site.by   "$http_origin";
}


server {
    #return 403;
    return 301 https://$host$request_uri;
    listen       80;
    server_name  *.site.by;
	# server_name  *.pp.site.by;
}

################################ test ########################################

# LANDING

server {
    server_name  test.site.by;

    location / {
          rewrite ^/(about) / break;
          proxy_pass            http://172.16.3.52:31310;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }

    location /api/v1/ {
          proxy_pass            http://172.16.3.52:31010;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }

    listen 0.0.0.0:443 ssl;
    ssl_certificate /etc/ssl/rapidssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/rapidssl/priv.key;
}

# USERS FRONT
server {
    server_name  testapp.site.by;
    location / {
          rewrite ^/(account|support|login|register|tokens|wallet) / break;
          rewrite ^/wallet/buysc /$1 break;
          proxy_pass            http://172.16.3.52:31110;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }
    location /api/v1/ {
          proxy_pass            http://172.16.3.52:31010;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }

    location /commonSocket {
         proxy_pass            http://172.16.3.52:31010;
         proxy_http_version    1.1;
         proxy_redirect        off;
         proxy_set_header      Host             $host;
         proxy_set_header      X-Real-IP        $remote_addr;
         proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
         proxy_set_header      Upgrade          $http_upgrade;
         proxy_set_header      Connection       "upgrade";
         proxy_read_timeout    1800;
         proxy_send_timeout    1800;
         proxy_connect_timeout 1800;
    }

    listen 0.0.0.0:443 ssl;
    ssl_certificate /etc/ssl/rapidssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/rapidssl/priv.key;

}

# API
server {
    server_name  testapi.site.by;

    location / {
          rewrite /invest-api/(.*) /$1 break;
          proxy_pass            http://172.16.3.52:31010;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }
    listen 0.0.0.0:443 ssl;
    ssl_certificate /etc/ssl/rapidssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/rapidssl/priv.key;
}

# ADMINS FRONT

server {
    server_name  testadmin.site.by;

    location / {
          rewrite ^/(account|support|users|companies|tokens|fiat-requests|settings|operations) / break;
          proxy_pass            http://172.16.3.52:31210;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }
    location /api/v1/ {
          proxy_pass            http://172.16.3.52:31010;
          proxy_set_header      Host             $host;
          proxy_set_header      X-Real-IP        $remote_addr;
          proxy_set_header      X-Forwarded-For  $proxy_add_x_forwarded_for;
          proxy_read_timeout    1800;
          proxy_send_timeout    1800;
          proxy_connect_timeout 1800;
    }

    listen 0.0.0.0:443 ssl;
    ssl_certificate /etc/ssl/rapidssl/fullchain.pem;
    ssl_certificate_key /etc/ssl/rapidssl/priv.key;
}